All you need to know about the security flaws that have virtually put all phones, PCs at risk

114

All you need to know about the security flaws that have virtually put all phones, PCs at risk

Researchers have found security flaws that virtually put all phones and computers at risk. Termed "Meltdown" and "Spectre", the two security vulnerabilities found in Intel, AMD and ARM processors threaten almost all PCs, laptops, tablets and smartphones. The risk is regardless of manufacturer or operating system. Here's all you need to know about this first major security scare of the year 2018

Who discovered the bugs: Google

Security researchers at Google's Project Zero team discovered the serious security flaws that affect computer processors built by Intel and other chipmakers. The chipmaker was forced to disclose the issued after a report in UK-based technology website The Register caused Intel's stock to fall. Both Intel and Google claimed said they were planning to disclose the issue next week once fixes were available.

The Google security team found security flaws in devices running on Intel, AMD and ARM chips. In fact, Intel claims that that reports describing the 'flaw' unique to its products are incorrect.

How it can harm users: It allows hackers to steal data, such as passwords saved in Web browsers

The bug could let hackers steal data, such as passwords saved in Web browsers.

Devices affected by the bug: OSes from Microsoft, Apple, Google and Linux have been affected

The bugs affect devices running on OSes of Microsoft, Google and Apple.

Microsoft, Apple and Google are all issuing updates

Microsoft Corp, Apple Inc and Google, the three major companies behind the operating systems that dominate the world computing landscape are all issuing updates. So far, Apple and Microsoft have not said precisely when. Microsoft said in a statement it had no information suggesting any compromised data but was "releasing security updates today to protect Windows customers against vulnerabilities."

Intel disputes report that fixes may slow down some PCs and laptops

Some reports claim that the fixes can slow down some computers and laptops, especially the older ones. Intel, however, has disputed these reports. The company said in a statement, "Contrary to some reports, any performance impacts are workload-dependent, and, for the average computer user, should not be significant and will be mitigated over time."

Spectre affects chips in smartphones and tablets, as well as PC chips from Intel, AMD

Spectre affects chips in smartphones and tablets, as well as computer chips from Intel and Advanced Micro Devices (AMD).

How Spectre affects users: The bug can trick users into leaking sensitive info

Spectre vs Meltdown: Spectre is less dangerous than Meltdown, but it is more difficult to patch

According to security experts, Spectre is less dangerous than Meltdown. However, it is deadlier as it is almost impossible to patch it.

What users can do: Install security patches asap

Consumers should check with their device maker and operating system provider for security updates and install them as soon as possible.

Android phones with latest security patches are safe

Google said that Android phones with the most recent security updates are protected, and users of popular web services like Gmail are also safe. Chromebook users on older versions will need to install an update whose release date has not been set. Chrome web browser users are expected to receive a patch Jan. 23.

Researchers say an update is in the works for Apple laptops and desktops, but it is not yet clear whether the company’s iPhones and iPads are at risk.

Amazon, Microsoft and Google have already patched their cloud infrastructures

Major cloud services aimed at business customers -- including Amazon Web Services, Google Cloud Platform and Microsoft Azure -- say they have already patched most of their services and will fix the rest soon.